Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: JetBrains IDE Support

CRITICAL RISKRemoved from Chrome Web Store

JetBrains IDE Support

ID: hmhgeddbohgjknpmjagkdomcpobmllji

Could be malicious

Extension Info & Metadata

Status

Removed

Version

2.0.10

Size

0.08 MB

Rating

3.8/5

Reviews

766

Users

332,746

Type

Extension

Updated

Oct 17, 2020

Publisher Contextual Analysis

Author: http://www.jetbrains.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

332,746

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

HTML/CSS/JavaScript editing and JavaScript debugging using JetBrains IDEs.

Enables debugging JavaScript from the JetBrains IDEs without starting a new instance of Chrome. Please note that this extension is incompatible with Chrome 86 or above and it soon will be completely deprecated. This extension is not required for debugging JavaScript in WebStorm and other JetBrains IDEs.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.10 Code review	5

Extension Version	Code Review Findings
2.0.10	5

Files with findings

3 distinct paths — top paths by unique finding count:

gen/browser-ext-bootstrap.js3
devtools.js1
gen/chrome-ext.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	high	gen/browser-ext-bootstrap.js (line 338)	The extension intercepts HTTP responses for user-configured URL patterns and forcibly injects Access-Control-Allow-Credentials: true and Access-Control-Allow-Headers including Cookie. This CORS bypass allows cross-ori…	2.0.10
2	Network Interception	high	gen/chrome-ext.js (line 263)	Using webRequestBlocking, the extension intercepts every .js and .dart file request made by tabs connected to the IDE and silently redirects them through a local proxy endpoint on the IDE host, with the original URL b…	2.0.10
3	Code Injection	medium	devtools.js (line 35)	The devtools page receives selector, name, and value fields from the background page via a port message and constructs JavaScript expressions that are evaluated inside the inspected (target) web page via chrome.devtoo…	2.0.10
4	Network Interception	medium	gen/browser-ext-bootstrap.js (line 233)	The applyCors function registers blocking webRequest listeners against user-supplied URL patterns stored in chrome.storage.local. An attacker with write access to extension storage (e.g., through a compromised sync or…	2.0.10
5	Remote Code Loading	medium	gen/browser-ext-bootstrap.js (line 188)	The extension polls an HTTP endpoint constructed directly from user-controlled host and port values stored in chrome.storage.local, and unconditionally JSON.parses the raw responseText to obtain a BuildInfo object tha…	2.0.10

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


developer.chrome.com	/extensions/match_patterns.html	http://developer.chrome.com/extensions/match_patterns.html
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
crbug.com	/112091	http://crbug.com/112091
bugs.webkit.org	/show_bug.cgi	https://bugs.webkit.org/show_bug.cgi?id=63367

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


127.0.0.1	IPv4	-

2.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Doesn't work for latest Chrome 86. Should we await for the new feature in php/webstorm to debug the same as with Live Edit + this extension in already running browser instance?

Ivan Petrov·11 Nov 2020

Muy mala, nunca funciona

Dario Treco·8 Nov 2020

经常失效

X Z·3 Nov 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

JetBrains IDE Support

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews